This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dRWUS11O3Q1Kkz7jpvC3cVjMptw.roa File: dRWUS11O3Q1Kkz7jpvC3cVjMptw.roa (raw, json) Hash identifier: ZGffD6Y7Jq+FrvwjVIqK0ky+s6p0me/6e9GXEvI4ocY= Subject key identifier: 75:15:94:4B:5D:4E:DD:0D:4A:93:3E:E3:A6:F0:B7:71:58:CC:A6:DC Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019753F9043F6D484B5649AA9357BAE11164 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dRWUS11O3Q1Kkz7jpvC3cVjMptw.roa Signing time: Mon 09 Jun 2025 09:15:17 +0000 ROA not before: Mon 09 Jun 2025 09:15:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207530 IP address blocks: 2a12:bec4:1a90::/48 maxlen: 48 2a12:bec4:1a91::/48 maxlen: 48 2a12:bec4:1a92::/48 maxlen: 48 2a12:bec4:1a93::/48 maxlen: 48 2a12:bec4:1a94::/48 maxlen: 48 2a12:bec4:1a95::/48 maxlen: 48 2a12:bec4:1a96::/48 maxlen: 48 2a12:bec4:1a97::/48 maxlen: 48 2a12:bec4:1a98::/48 maxlen: 48 2a12:bec4:1a99::/48 maxlen: 48 Validation: Failed, certificate revoked on Tue 24 Jun 2025 00:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:53:f9:04:3f:6d:48:4b:56:49:aa:93:57:ba:e1:11:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jun 9 09:15:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7515944b5d4edd0d4a933ee3a6f0b77158cca6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:6c:e2:6b:31:5d:02:a7:20:e0:cf:05:03: c9:1e:c6:7c:6e:e5:70:36:6f:72:34:94:4a:90:b4: 9a:2c:67:10:f4:34:ce:f2:d6:92:01:1b:3c:65:ef: ec:d8:ea:6b:dc:9f:94:53:02:a6:6d:ab:8c:83:78: 35:98:1e:4d:3d:a5:c0:44:84:d6:3a:88:bf:e0:68: 7c:15:02:32:29:fa:13:2c:2c:fd:11:b4:3a:b1:74: cf:90:b9:48:82:41:fd:38:f1:08:e8:33:b9:ab:df: 01:f4:b5:91:7c:cc:f6:d3:4d:45:21:94:af:55:6f: 49:0a:02:9c:67:78:18:04:c3:e7:98:98:28:bc:c8: aa:36:d3:d8:8d:85:b7:91:e6:ca:02:5c:c1:3d:7f: ae:e0:ec:8b:72:3e:01:d9:08:bf:d6:92:3a:f4:d5: 0d:b6:ce:b9:b3:f8:8f:90:c9:ad:8b:65:2a:7c:b0: 30:db:e1:61:f2:0b:3a:c0:02:3d:8c:30:e0:fd:b4: 58:7e:a5:cf:59:2d:d1:e2:cb:04:96:85:65:06:f3: d5:b5:b9:32:77:b2:b5:26:41:23:9d:ee:4e:c9:46: d6:73:d4:12:db:97:21:b5:54:1c:9b:86:0c:27:22: fe:eb:9f:12:81:b9:1f:07:32:f7:a6:36:98:f4:d3: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:15:94:4B:5D:4E:DD:0D:4A:93:3E:E3:A6:F0:B7:71:58:CC:A6:DC X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dRWUS11O3Q1Kkz7jpvC3cVjMptw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1a90::-2a12:bec4:1a99:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 17:2d:ba:ff:b7:8b:7c:ad:e7:a1:de:3f:1f:ba:bc:ce:e2:fa: c8:6d:42:88:46:68:4e:12:a6:d1:10:07:c5:36:b6:11:9f:1d: d7:e7:4d:9c:42:66:ff:44:f4:68:c0:1b:1c:ff:e0:05:fc:cc: 85:14:09:5c:4c:1d:23:2a:6c:38:e9:c1:c6:de:ec:8d:0b:59: a8:7f:87:9b:c8:f7:a2:44:f5:6a:36:2d:eb:b4:51:d9:65:69: d7:15:9d:f6:dc:71:6b:2e:1f:93:6f:5b:d1:30:58:c6:cb:48: 47:3e:0e:df:9a:88:64:4f:16:27:3e:a9:5b:f4:8f:ef:18:db: ae:8b:a2:db:7e:c1:2b:39:f7:c6:70:0d:8b:1e:68:15:ba:d8: ae:03:39:8d:6a:5a:7e:e8:c7:55:06:eb:ff:0f:4c:2f:f7:f2: b8:6c:1a:30:cf:92:54:fe:99:96:9b:5f:e5:5c:02:91:d7:2d: 0f:1b:76:31:85:73:fd:ed:6c:16:97:d0:fe:be:b1:2e:71:49: c5:e8:c6:f7:d4:32:8a:95:03:48:5a:68:1c:2c:b0:f4:32:c3: cf:d6:fe:d1:e9:87:17:2d:94:f6:d0:7b:51:53:ac:bf:a7:18: 01:b8:01:b9:da:b0:da:d2:42:5c:9b:27:f9:cc:c8:13:6a:0c: f8:bd:8f:90 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZdT+QQ/bUhLVkmqk1e64RFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUwNjA5MDkxNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTE1OTQ0YjVkNGVkZDBkNGE5MzNlZTNhNmYwYjc3MTU4Y2NhNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv99s4msxXQKnIODPBQPJHsZ8buVw Nm9yNJRKkLSaLGcQ9DTO8taSARs8Ze/s2Opr3J+UUwKmbauMg3g1mB5NPaXARITW Ooi/4Gh8FQIyKfoTLCz9EbQ6sXTPkLlIgkH9OPEI6DO5q98B9LWRfMz2001FIZSv VW9JCgKcZ3gYBMPnmJgovMiqNtPYjYW3kebKAlzBPX+u4OyLcj4B2Qi/1pI69NUN ts65s/iPkMmti2UqfLAw2+Fh8gs6wAI9jDDg/bRYfqXPWS3R4ssEloVlBvPVtbky d7K1JkEjne5OyUbWc9QS25chtVQcm4YMJyL+658SgbkfBzL3pjaY9NNsbQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHUVlEtdTt0NSpM+46bwt3FYzKbcMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvZFJXVVMxMU8zUTFLa3o3anB2QzNjVmpNcHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqEr7E GpADBwEqEr7EGpgwDQYJKoZIhvcNAQELBQADggEBABctuv+3i3yt56HePx+6vM7i +shtQohGaE4SptEQB8U2thGfHdfnTZxCZv9E9GjAGxz/4AX8zIUUCVxMHSMqbDjp wcbe7I0LWah/h5vI96JE9Wo2Leu0UdlladcVnfbccWsuH5NvW9EwWMbLSEc+Dt+a iGRPFic+qVv0j+8Y266Lott+wSs598ZwDYseaBW62K4DOY1qWn7ox1UG6/8PTC/3 8rhsGjDPklT+mZabX+VcApHXLQ8bdjGFc/3tbBaX0P6+sS5xScXoxvfUMoqVA0ha aBwssPQyw8/W/tHphxctlPbQe1FTrL+nGAG4AbnasNrSQlybJ/nMyBNqDPi9j5A= -----END CERTIFICATE-----Generated at Thu Jan 8 23:31:46 2026 by rpki-client